Signature Detail

TNS: Malformed IP Address

This anomaly triggers if it detects malformed IP addresses in a Transparent Network Substrate (TNS) message. This can indicate that an attacker is attempting to compromise your system.

Extended Description

A TNS message containing an invalid IP address constitutes a protocol anomaly. Such a condition could indicate a TNS configuration or implementation error. It also could indicate that an attack against the TNS service is underway. The impact depends on the implementation of TNS, and could result in a denial of service, buffer overflow, and information disclosure.

References

• URL: http://www.orafaq.com/faqnet.htm
• URL: http://en.wikipedia.org/wiki/Transparent_Network_Substrate